$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: ZymV1VACggRe4cMfwC/03vAAolZOw9GpMmMsHm69aSM= Subject key identifier: 99:AB:91:5A:09:D2:79:7B:DE:DB:07:BA:29:7D:7F:DE:E1:AE:FF:40 Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 59088668E21F158E9B167CA748C280F58341D678 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 0251 Signing time: Tue 28 May 2024 09:01:03 +0000 Manifest this update: Tue 28 May 2024 08:56:03 +0000 Manifest next update: Fri 31 May 2024 18:21:03 +0000 Files and hashes: 1: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: Bm+sCPGedwoBlc1Q4VQwcGWyRu1p9CWcvpCvpw7kTVs=) 2: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: tedquNkZtmBtEUwgdLalLQxPBdDLvt8qR/BZ3JJwllc=) 3: 3130332e35322e36302e302f32342d3234203d3e20313338383831.roa (hash: VYfOnSr/N8rvbR6VjMh/olyNmsypisxyWI2UetiiFgI=) 4: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: 3NhZ+cMaJ/kuJh2xzezegJUqVyXX8oiJol5+PbFDJ00=) 5: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: JN9u6P22lLJGrWxSjR+9HcKY6CWIiFn0lpZRegzo9WA=) 6: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: W51LOKClkaeJ/f1SSUG6a0xVFrL+8+TkTpejm+jH3Mg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:08:86:68:e2:1f:15:8e:9b:16:7c:a7:48:c2:80:f5:83:41:d6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: May 28 08:56:03 2024 GMT Not After : May 31 18:21:03 2024 GMT Subject: CN=99AB915A09D2797BDEDB07BA297D7FDEE1AEFF40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e8:65:72:bd:2b:45:89:90:68:55:71:87:c9: 77:97:44:f0:f3:b5:ed:b5:f1:ec:83:96:4b:45:83: 53:3b:60:98:e3:af:f4:a2:e3:b1:41:2c:02:bf:c2: bc:09:15:37:b3:a3:8f:d8:15:18:45:46:86:70:0a: 0f:c2:5e:e8:e7:8a:85:80:e8:d5:8d:3c:d6:ac:46: 3e:ef:14:e2:cc:02:3b:94:8d:d6:48:99:4d:7c:b3: 95:11:05:bd:ca:10:e9:84:65:fc:81:79:77:52:09: 61:e6:31:0b:4b:a8:f6:43:35:66:f8:e7:d7:a4:65: 3a:a7:62:76:6f:9c:f4:4a:d0:e3:d9:4b:d0:e3:1c: 09:a7:77:52:44:e8:be:be:2b:05:da:41:de:27:1d: 05:3e:ab:e9:21:48:c3:fe:1a:87:d7:54:71:16:0e: b3:26:75:11:10:86:90:aa:69:7f:62:88:b2:66:36: fc:3c:6e:02:16:92:fe:9a:7b:28:2f:17:3f:e9:a0: 85:af:99:32:98:4e:9b:92:df:bf:7e:d0:9e:ba:e5: d3:c5:22:2a:4d:c3:a2:b0:7b:d8:c6:4f:66:e1:fd: 36:fa:4b:43:6a:e6:9a:51:34:77:77:c7:44:14:ed: 36:71:ad:68:ec:ad:3e:72:dc:2c:81:57:8b:c0:14: d4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AB:91:5A:09:D2:79:7B:DE:DB:07:BA:29:7D:7F:DE:E1:AE:FF:40 X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:af:6e:2e:35:0d:96:b3:cb:0b:ab:79:ff:94:bf:4d:b1:24: 6f:df:16:18:27:47:37:67:d2:48:3f:86:31:7c:26:1d:4f:a6: 23:fd:7b:5e:63:62:a4:6d:d5:95:08:bb:31:80:0a:8c:16:d4: d0:cc:65:19:e2:7b:b6:e6:d0:09:96:fa:0c:10:b4:6f:bf:0c: 27:87:cb:63:26:49:7e:a6:fb:c9:ee:5c:cc:b5:96:6a:f2:41: 60:ec:1d:7a:d8:7b:9e:45:94:4a:4f:c9:df:f7:bf:98:15:9a: 7b:22:f9:44:82:a4:9d:a1:c1:d0:ef:67:26:2b:27:d7:2e:94: 81:72:b3:44:66:50:50:f2:78:f7:78:6d:d0:fa:24:d2:a2:be: e1:00:f4:66:cb:94:5e:0e:4d:b0:ab:33:5f:35:9a:4e:11:8b: 79:10:ad:77:10:6b:53:c0:45:c4:b1:b2:c9:3c:6e:b5:f7:0f: f4:3e:d6:b4:3a:a9:88:46:a2:5a:6c:da:5a:18:7f:94:63:ba: 1d:97:83:e4:15:26:52:95:d8:25:3a:1f:79:2b:43:25:f8:02: ac:8f:f5:b3:74:b4:8f:fb:67:3f:5c:e6:94:55:e0:56:b8:97: 7c:46:ae:4f:da:76:d8:c5:0f:26:bb:5e:88:2e:54:3a:20:6f: 49:d9:42:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQiGaOIfFY6bFnynSMKA9YNB1ngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNDA1MjgwODU2MDNaFw0yNDA1MzExODIxMDNaMDMxMTAvBgNV BAMTKDk5QUI5MTVBMDlEMjc5N0JERURCMDdCQTI5N0Q3RkRFRTFBRUZGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh6GVyvStFiZBoVXGHyXeXRPDz te218eyDlktFg1M7YJjjr/Si47FBLAK/wrwJFTezo4/YFRhFRoZwCg/CXujnioWA 6NWNPNasRj7vFOLMAjuUjdZImU18s5URBb3KEOmEZfyBeXdSCWHmMQtLqPZDNWb4 59ekZTqnYnZvnPRK0OPZS9DjHAmnd1JE6L6+KwXaQd4nHQU+q+khSMP+GofXVHEW DrMmdREQhpCqaX9iiLJmNvw8bgIWkv6aeygvFz/poIWvmTKYTpuS379+0J665dPF IipNw6Kwe9jGT2bh/Tb6S0Nq5ppRNHd3x0QU7TZxrWjsrT5y3CyBV4vAFNRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmauRWgnSeXve2we6KX1/3uGu/0AwHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASvbi41DZazywuref+Uv02xJG/fFhgnRzdn 0kg/hjF8Jh1PpiP9e15jYqRt1ZUIuzGACowW1NDMZRnie7bm0AmW+gwQtG+/DCeH y2MmSX6m+8nuXMy1lmryQWDsHXrYe55FlEpPyd/3v5gVmnsi+USCpJ2hwdDvZyYr J9culIFys0RmUFDyePd4bdD6JNKivuEA9GbLlF4OTbCrM181mk4Ri3kQrXcQa1PA RcSxssk8brX3D/Q+1rQ6qYhGolps2loYf5Rjuh2Xg+QVJlKV2CU6H3krQyX4AqyP 9bN0tI/7Zz9c5pRV4Fa4l3xGrk/adtjFDya7XoguVDogb0nZQr4= -----END CERTIFICATE-----Generated at Tue May 28 11:04:52 2024 by rpki-client on console-fra.rpki-client.org